Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gHvo07St6-RRYbW1asXnaikqYaE.roa
File: gHvo07St6-RRYbW1asXnaikqYaE.roa (raw, json)
Hash identifier: i0nsa7FzS4SdqgFu4F6vSmy2r3lLWPsmk2d/Wz7TvBU=
Subject key identifier: 80:7B:E8:D3:B4:AD:EB:E4:51:61:B5:B5:6A:C5:E7:6A:29:2A:61:A1
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019D6F62D1EA3270B2E1800BE179492A38C2
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gHvo07St6-RRYbW1asXnaikqYaE.roa
Signing time: Wed 08 Apr 2026 23:17:20 +0000
ROA not before: Wed 08 Apr 2026 23:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39944
IP address blocks: 193.168.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6f:62:d1:ea:32:70:b2:e1:80:0b:e1:79:49:2a:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 8 23:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=807be8d3b4adebe45161b5b56ac5e76a292a61a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:8d:91:93:5d:54:d9:a9:c8:20:3f:f7:5f:
e9:10:f0:99:80:30:d1:7a:dc:2f:4d:42:d6:e4:3d:
be:47:d8:6f:50:7b:8d:9d:d4:31:63:ab:25:85:44:
3f:4e:c3:02:fc:26:6e:e3:21:ae:b9:c3:d7:ef:03:
b7:b2:61:3a:74:ef:c9:d4:61:af:91:2e:58:4f:10:
ac:8b:0f:24:b9:a8:dd:fc:47:27:98:f0:11:cb:ae:
5d:75:c0:1a:ea:0b:7b:ac:7a:b7:d6:e0:1c:30:eb:
45:f7:0f:e7:ce:f9:3e:0f:33:fa:00:46:f2:58:3f:
7d:10:f0:82:1d:04:b1:1c:ed:f5:de:c1:28:17:3d:
dd:5b:3b:44:39:db:3a:0d:ba:16:8b:5f:29:96:77:
16:bd:7b:a1:f1:46:71:b0:dd:7d:55:ab:c9:0c:0d:
08:76:d6:80:c6:19:bf:f8:85:13:cd:03:e4:b5:ca:
aa:1a:23:55:6d:8a:c5:65:13:38:6e:02:03:70:43:
a2:57:fb:ec:73:d4:af:84:e4:d9:b8:95:25:20:62:
1e:8b:63:8f:f4:1f:28:f8:7c:6d:47:2f:9c:e4:a5:
03:81:6f:53:38:a4:64:fd:ac:93:53:97:25:68:49:
3b:ad:9d:a8:a7:fb:c7:80:89:a0:29:bb:e4:21:ee:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:E8:D3:B4:AD:EB:E4:51:61:B5:B5:6A:C5:E7:6A:29:2A:61:A1
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/gHvo07St6-RRYbW1asXnaikqYaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.211.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:98:a0:ef:d1:fd:e9:43:c7:9e:af:19:dc:84:34:47:c1:55:
d7:a5:5f:43:b2:90:b9:2b:c3:b8:0d:7c:88:18:bf:1e:95:29:
6c:03:97:65:3b:51:aa:09:99:b2:8c:54:96:06:80:8a:2e:34:
5f:d1:7e:4b:30:2f:97:6d:6e:66:63:3b:6a:f6:65:a2:49:eb:
be:40:a7:9f:99:26:39:69:f4:2d:2e:7e:bb:33:f3:87:4b:48:
39:fc:cf:c0:e7:a1:17:bd:81:3b:fb:61:54:3a:9e:76:40:93:
2e:ba:08:f0:f5:7f:d3:8c:3b:26:55:9a:93:c7:5b:d0:4f:17:
73:ff:c1:8f:b9:a0:b7:82:b5:16:bc:fd:e4:5d:c3:62:6e:dc:
38:c5:2f:c1:35:13:4d:89:e0:e9:a0:57:ce:c1:e0:a9:2a:16:
55:6c:5f:d7:4f:2b:a0:c5:ea:a6:3e:b2:03:93:2b:d7:88:06:
d0:99:0e:48:96:25:70:54:7a:84:e3:9b:b8:32:a6:13:92:f9:
66:ea:ce:81:4b:e7:12:f5:19:22:e8:9d:e4:06:26:fb:6c:87:
de:4a:88:dc:8e:2a:62:0d:e0:42:ed:2e:40:32:e8:23:d4:0a:
a0:cc:3e:aa:49:69:82:28:76:f2:b7:fa:44:df:6e:1c:06:01:
7f:9e:a3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:13:29 2026 by rpki-client